FINA1 FBI \t*mm \L DETERMINATIONS CONDITIONS; 


[V . \ j '' ^ S - ' • 


FIA is tn ! the fEkGowamtmi Act v * 

ft/k /U 

FIA is to fee eomoleted as a matter of PRIoDOj discretion. 


Is FIA to be published m FBI,00V (after unvRMP FOIA redactions) 


FI.A is ^ v\5 .v *o 1 v Uk s o ' 

_System does not collect. maneum or disseminate Fll, 

System ft greed lathered Fm existence before 40712003; no late? changes posing significant privacy risks?, 

.in* N m ihe sssten; rckttes ' „ * os v n > f ve- i 

_Si stem her keen prmionsk assessed m an evahnuion similar to a FIA. 

_V ***.*■ r F&de issues tot proses issues are le'cremoft: 

_Other 


\mu ( \sop\ 5Sl5i233 __ 

N ''u\ I Hi HMD RIOS tier Mb Ks I°d 2 3? \ S Yes-See sample EC oh FCLU intranet website hem: 

http homelk) ssk'I l'B i-VIJ /FthamCivi'kOdl inertko'-ftdOLIbrars Cam fas naeclT.s-2-i sc opd 

SidRN NORN res IsloHis) seqmred? .No ft Yes: x po 

I mpv re revise aJe Pro ope \et u'\e x > state ' eats to :e m'ed kauo ' >k Np x o\ 


kt e ; > N o I s p mono s < r <s s \ N m iJe { K rev'he '■ I edem „ s - ect" ro s s« ^ \ 

The svviem may erenam Federal records ohm her or no? it contains Prhavi Act requests ami m errs merit, a records 
\ ft 5. o>. \ * \t hsi ■'Ik si s M \da>prr\ lea is 

as out as cm eo"'pbv«KC "ith ceasmeincase tor F'evt'omc Reco* Jlcepmg Ceadkati oo and ,e;> accesses upihte;- _ 

Od\>- 


limit Chief 

Privacy raid Civil Liberties emit 

f Signature: 

| Date Signed: 


amass O tea i\v men Counsel 

FBI Prnaev and Cod Liberties Officer 

| Sigmrnm: 
f Date Signed: 



ffi 



epic.org 


EPIC-14-06-04-FBI-FOIA-20150519-6th-Production 


EPIC-1705 


































I, INFORMATION ABOUT THE SYSTEM / PROJECT 


L Provide a general <!es€.riptl<m of the system or project tliat includes: la) name of 
the sytksm/project, l»el«dlog associated acronyms; (h) structure of the 
system/projeeh mdutlmg itttercotmeetUms with oilier projects or systems; <e) 
purpose of the sysfexn/projeei; tel) nature of the information in the system/projeet 
and how it will he used; fe> who will have access to the Information in the 
sysfent/projeet; If) and the manner of transmission to all users* 

The Global Operations Section (CIOS) Global Initiatives Unit (GIG) of the Criminal 
Justice Information Services (CJ IS) Division manages the mobile Biometric 
Identification Fools Program (BCD) biometric collection devices. These devices, cither 
Quick Capture Platforms (QCP) or Flyaway kits, arc state-on ibe-art biometric devices 
that allow investigators to collect fingerprint data, other idem living information, and 
available biographic data to validate a subject's identity through rapid identification 
services. The QCP and Flyaway kits enable instant access lo federal fingerprint 

databases.the Federal Bureau of Investigation's integrated Automated Fingerprint 

Identification System. (lAFlS g the Department of Defense's Automated Biometric 
identification System (ASI.$) j I 


QCP and Flyaway devices consist of a laptop, fingerprint scanner, camera, military 
battery and cellular air card or satellite communication equipment. The d evices have 
i In. m \G ■>< > w x l\ v to s c usqu^v | 


Authorised FBI personnel are the only users permitted to access or operate the QCP and 
Flyaway dewees. QCP devices arc deployed both within and outside of the United States, 
on the Southwest border, arid tn maritime situations. "They frequently arc deployed to 
combat theatres such as Iraq aad Afghanis tan. other hostile environments, and remote 
areas where access to CJ.1S services would otherwise be impossible. The devices hove 
assisted frontline FBI investigators with identifying terrorists and transnational criminals. 

Streets, and Violent Crimes. 

Flyaway devices also are deployed both within arid outside of the United States. 
Domestically. the devices support national special security events, humanitarian rescue 
and recovery, and mafp|fpQ scenarios, to addition, the Flyaway or QCP do wees way 
be used domestically by FBI agents during: investigatory detentions, incident to arrests, 
and when the subjects provide consent. A February 2011 opinion from the FBFs Office 
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i i information is intended to be used, in conjunction with other data elements, 
to Indirectly identity specific individuals, 

_X _ 5 e :o„ t „ >,' eqr X. i.v't < d n « u \ s c t ace , t d" e n cc* 1 

u: 1 hiked; or Im.koNc V \p>..ci!k rshvdnjN' 

If you marked any of the above, proceed to Question 4, 

_ None of the above. If none of the above, describe why the Information does not 

identity specific individuals cither directly or indirectly, 

4, I Xvs the -o stem protect penam oiil| to ye v ore men; onipUyece, .cemtfot tom, & 
consultants?. 

...... X.NO ...YES 


5, la mfounatmo about 1 hated Suites citi/.eusor Ytnti.N adsnttled permanent redden* 
oJtetk retrieved (fom the patent pvAsm; m, name or ether ;YO;''u kknutk?" 

_NO. pi' run skip in question ?,] 

X YES. flf yea, proceed iu the next question.) 

6. lX;v.r ihe m protect 4 0 'k\$ any informaoen dimmE tv i $he person A ,\ Uk 
sofoeet of the information? 

NO flf no, proceed to plication ?4 

.X._ YES 


O w >v 'vs, ' ^ u, -vpv v. * tr , ' \h v,n 

assessments/' 

_NO 

.X.YES flf yes, proceed to question nj 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO | The program will need to work with P€LU to tieudopdm piemen t 

the necessary hmnfs),J 
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V'BS identify any forms, paper nr electronic* nsesti to request snefe 
information from the Information sublet: 


7. Arc Social Security 'Numbers (SSNs) collected, naimlaincd or disseminated kora the 
system/prqkefi Full SSNs should only be used as kientilkrs m limbed instances. 

X NO YES If yes, check sil that apply: The software does not 

recognise SSN as a required held nor does it have an optional held tor the SSN. 
i kuvever. an authorised user may place a SSN irt the Remarks held. The soikvare 
stores the information in the Remarks field but it is not searchable by SSN. 

system:. 

SSNs are Important for other reasons. Describe;: 

The system/project provides special protection to SSNs te.g , SSNs are 
users). Describe: 

SSN a Explain; 



.Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 

f \ \ K ? U v , t ! ! \ \ t t v. \ 

collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required II'a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certdicatout fo Accreditation <Cfo A> by the FBI 
Seeurity Division (SecD)? 

.X _ HO If no. indicate reason; if Ck%A is pending* provide anticipated 
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completion date: Estimated December 3.1,2011. The systems 
accessed by the devices (IAFIS, ABIS, 1'DENT) have independent C$zA. 

YES If yes, please indicate the fnlkmimg, If known; 

Provide date of last C&A c erf i ft eado n/re-eertifi cat ton; 

Copfidenfiallty;_Low Moderate High_Undefined 

In fegri ty: _Low M ©derate High U odei) a ed 

Availability: _Low Moderate High Undefined 

_Hot applicable.tills system is only paper-based. 


10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007. P.L 110- 
53 (codified at 42 USC 20CK)ee-3)? 

X NO 

_YES If yes, please describe the data mining function: 

11, Is this a national security system fas determined by the SecD i? 

X NO YES 

! 2. Status of System/ Project.: 

This is a new system/ project in development. 

IL EXISTING -SYSTEMS / PROJECTS 

1. When was the system/prdioot developed? 2007 

2. Has the system/projeet undergone any significant changes since April 17,2003? 

X NO [If no. proceed to next question (11.3),) 


YES If yes, indicate which of the following changes were involved (mark ail 
changes that apply, and provide brief explanation for each marked change): 

.. A conversion -front paper-based records to an electronic system. 
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A change from information in a format that is anonymous or non- 
identiflahle to s format that is idemi liable to particular individuals. 

A now use of an IT system/prajcet, including application of a ne w 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist,) 

u _ A change that results in Information in ideoliiiahk form feeing 

merged, centralized, or matched vv 1th other databases 

A new .method of autheotkaiing the use of and access to 
information in identifiable form by members of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

__ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

A change that results in a new use or disclosure of information in 
identifiable form. 

A change that results in new items of information in identifiable 
form being added into the sysiem/prqfeet 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project, 

_Other (Provide brief explanation!: 

Doss a PI A for this system/project already exist? 

X NO_YES 


a. Provide date/title of the PI A: 

b. Idas the system/projeet undergone any significant changes since the PI A? 
YES 
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FBI PRIVACY 'HIRESHOLD ANALYSIS (FTA) 


NA ME OF SYSTEM /P8Qi£€T: | 

kiOi ^ ^ ^ x S 


16 K 

Ai i'iiiNUi 

KHi OCR Kit l\.T 


1 

SYSTEM/PROJEO' FO€ 

i Na:n.a:| | 

Isogrta: 


Sunn;: | i 


(■noon 

:or Support Sant ion 

Program Cilice: ieformatio?: 

i Liberties Doit 

DoNato: 

;r Intonnaiion leahookup Services 

Svgcrns Security ; JnA 

>' 1 1 

i Divbjoi 


Division.: Scour! tv Division ! 

Room Number: B.U. Rm 

Phone [ 

- 1 

i kbonc.l 1 

: y.s^O 


lumber: JBB. Rtn OvSS 

Svoo.m.Number: SPY.B P-bOS 



FBI DIVISION INITRMFDI \TF \PPROYaI.N 



Program Signager lor other appropriate 
i executive ;R Division aesennloea) 

N ' ' O' ' ^0' 

i 

Program Division: Enclave 
Support Don 

x e r 

! Date s-u.neT ^...D. .- 

1 Name | | 

; • me; 1: octave prot-tarn Yammer . 

1 Signature: 

: Data rigoce: 
i Sanaa: 

FBI HQ Division: 

Network Support Section 

^ , HO*. .\:wj He' 

Date a;goes: / e- ...E" 

Namm Yame: Stove Shelton 

lit la: Sect io;:t Cruel, 'Network Sagoo: 

Sag Ion. USD 

Signature: J 

1 1 

11 SST// i 

1_1 

Dt.sc: DB .DiVisusn Pnvacyomec 
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P1A is lo oo cosTspkded so a maker of FBI- DOJ discretion. 

is id A to be published o» FBi .GOV obkr oov HMD FOIA redactions;? .Yes. .No 

X PIA is me repaired lor she IbPokreg isarsoaG): 

Sysmm does rsor codecs. rsuasstaaa or disseminate El; 

Syskan is grandSadtemO s;s; existence bsdorc 4/1 7/2 RD 3; oo later changes gosnsa sicsssikasrs privacy risks). 
X mrorsnaoos; so she sysmot modes ms enema: tsovenssstent operatsosts. 

_System isos; bees; prev;m.;sly assessed anber an esalnarior: similar so a PsA. 

X No slgn-bcaN privacy Bsaes sor privacy issnes see csss harmed ;. 

'.’I'' Other" 


Applicable SORN; A: ...0)i:bMii:..LN.V..s..PpsibdiX.dx .XSb.r.PX. 4 .ecce:s-x Records; .H S i'F.dsd is; : CHG. Central 

Notify FBI RX5FFRIDS per MiOG 1900.3X No Yes-Nee sample EC or; PS Lb nnrane: website i;cre: 

i sspp s|:Ta>>rics : !.XI):X)r)C/Ll B.ddla..lisbbasac:ysdssb%201..ii>err;e:F aP0b.il;rrey/il:>'Sr; i;>;- srissmibb-sd-d cs; osxi 

SORN/SORN reGakarss) reaakedb X No Vos 


IVepareSmviseAdd Pro ary Act {<-:} (3) slNeo-eots for related tonnsS X No Yes 

RECORDS. Elss program ahonki eonsak svkh RMD to Idem? s’ysv so ho arsy IXalern; sveokNekasron Is. rce< ask issaes. 
Tire sys tests sssay eorualr; Federal records whether s>r ssoS' a os aaraas FYivney Acs rerpseDs and. a; any or ear. a reeerds 
schedkie approved by rite National Archives ami Records AdmlnisSrasks; is rsecess&sy K VR > ear; oroside ad vies: on this 

o m N X x _^ ' V \ \v ' V V X X '\ X_x_ _ 

Other;' .. 


~l cn;s Chief j Signature: 1 

Privacy tmd Civs! Liberties bio is. ! Gate Signed ' --—■—--— 

James i. Fandom Dens.sty Gasseres I Cosarsei I Rlgnassssxs ......v--.•N'Cm 

FBI SXIvaey oao Civil ! ibe rocs Giheer. ^ y ,) 


rxcEASSinn) 
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2, Does toe syslem/puhect collect maintain, or disseminate any intormarbns about 
individuals s Lc v a human being. or natural person, regardless of nationality;? 



5, ideas e indicate If are. of the fleam log characteristics apply to the Inmrmation In the 
system about, individuals; Bear iu mind that log-on rniornurtion nary identify or be 
linkable to on individual. 

(Check ah that apply.) 



If yon marked any of the shove, proceed to Question 4, 



5. C information about United States citizens or iawfaily admitted permaner 
aliens retrieved irons rite systerts.dsrr.decr by name or ; tehee persona] identifier? 



I NCt ASMV'd'U 
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UNCLASSIFIED 


YES.. [If me proceed to the nest tfoestloeuj 

6. ! »'\\>thr \xsu-;" psou&t \ k\" $\ cUon nuNm SoeeUx ;?o?i she perso'- " 1 ■ > t so 

sub <\ v\. c o' nat o 

NO If ms pre-mat to question A) 

.YES 

a. Does iho systenYproecs. Nippon cnmmel €!> or PCl investigations or 
as sesame: a ;C 

.NO 

.YES | If > cm proceed to q«.osfio« N| 

> XO- O „* sot n "\ vU >p V T.Xt \ SUC ' u ,\1 

pu it < o ! , |' 0 \ \S: V. k'M i v - 4 ^ ON „0>, >' O 

separate notice)? 

_NO | Hu progmto w*I aeed to work with F< 11 to 4m ! <dnpftmphmmt 

the oeeessary form|s)<l 

.YES Mmiify my IP nos, paper or rleetnmks »m*I to reqorM met* 

iaformatbo from the ioforMatiop sohjeec 

?, So See A vo x \ ' Nvt cOlecs-S. mcAcnoo m o x-Aoueneu , o Sk 

" s<?r i'S'Vv Full SSNs should euly bo used as identifiers la ikrnicd instances. 

_XNO YES EC yes, cheek all that apply. 

vs \' ' Ww N olnko ru\ do - v 'obx * » *> 

xxro'c.xv.c' O': w .'■. c- ' i ' k o iu ! |yj'eOe x 



UNCLASSIFIED 
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N s I Ht <uv m\i "v u'' v n > ' & FI ' ^ X 

^ 'i i' >.u ' I » ! AnI \ > « 

iU'Mm candum^ "!ut must : Gulch oiiheeuntro s^ ee 

so\-.' Guses o v^'"";\ v s'n ce: ■ '.. mvcmv 

imposed as \ matter of Department of Jo.siko policy. Consultations with the 
(.Hike oi the General CotBBcl may be .requited if a contractor is operating the 
\> Iq; ' ov the t oi 


Idas the system undergone Cerfitkabon &. Accreditation tC&A) by the FBI 
Security Division (Secl>)? 

NO If m* habkate reason: if CXA is pending. provide anticipated 
completion dair, 

X YES If yes, please mJnmfe the following, If known:; 

Provide date of fast €&A ee rtl Ik a It o n /re-eeri fft e a llo n: 
November 20,21018. 

Confidentiality;;. hm ...X.. Moderate.High.Undefined 

1*tegriiy; Low Modemte X Jltgl f n defi w ed 

.4valla h illy; L ow Moderate X H igh Imdel n ed 

Not. applicable - this sy stem Is only pa.per-ba.sed. 
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UNCLASSIFIED 


Kl W' ' ' x ' < V " \ O ' 

Implementing Recommendations of the W11 Commission Act of 200?., P. 
?S O' c„: :. "2 1 A ''Woo o ' 

X NO 


YES If yes. pfcme describe the date wining J&metbm: 

11 . r| -ho o mTorT :$ccuri^ |ystesn |§§ oeiemiWo % the Sec )) 

.X.NO .VOS 

12. Sui0.oNyssCJB IN,- , 

%■■ »'' m me" 'Mo 'o #4i00's 


II. EXISTING SYSTEMS / PROJECTS 
. \\ hen '-mi.' ix s\ :>tcio .' o o '. do\„ oped? | | 

Nhh '" M'u IV O P » i.'' n '' ' » i 

X NO 5 ff 00 I'i'-, "..OOd to rest 'OB s.11 ' 


\ I n H >ve mbv.ne '"hkh of h« ojioo.: Gvmges -"MV !" 0 "-N'of. > mark all 
changes that apply, and provide brief explanation for each marked change); 

A conversion from paper-baaed records to an electronic system. 

_ \ v ! <a < „ o' i i > p’s ' \'5 

"in'' r i t h ^ n i i or i i <• 

_ \ i» 14 o <o U "'0't o pi; . * r o' >0" 

oohrohx' 'So; cS MOO' h-'". nmmuron y. TonbC AT loro ;> m.n mod 
> \0 tp'o - " ! 0 0' tea \ 'O'U ' ' S ! 

O'O'soo ft * O't\v":"o of-J m N" p" ' v M? 'I'd nm omm ; 

merged. centralized, or matched with other databases. 

\ ' methoe -n cMhoni .ooo. the ^ o o '. arc? " h 


l Nt'l VWiFTO 
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UNCLASSIFIED 


A systematic incorporation of databases ofiaformalion in 
iJcmuC L v :orm purchased m obtained Pen commercial {** poblC so» 

A new interagency use or shared agency function that results t 
non v o’ te exO'n ,o ! od< n > s 4^i f 

_A change that results in a new use or disclosure of information 

iJeniUlsble form. 

A. change that, results » new items of information in identsfiabl 
font K . < v r o i v 'or mow* 

Changes do not involve a change in the type of records maintui 
the individuals on whom records are maintained, or the use or 
^ \ i u , < f u t ur i i \ ,t ; pro c< t 

Other fProvide brief expla«atkmj| 

oes a PIA tor tin's system/prmect already exist? 

...X.NO . YDS 

Provide date/idk- of the PI A: 

Has the pmaA i taJxr e on w i iu changes since the PIA? 

. YES 
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Unclassified 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT: Bureau Personnel Management System (BPMS) 
B1KR FBI Unique Asset ID: SYS00Q0008 _ 


Derived From: 
Classified By: 
Reason: 
Declassify On: 


SYS TEM/PROJF.CT PO C 
Name| j 

Program Office: HRASU 

Divisi on: ITSD _ 

Phone: | | 

Room Number: 1907 


FBI OGC/PCLU POC 
Name: 

Phone|_ 

Room Number: JEH 7350 


b6 

b7C 


FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: IT 

Signature]”” . " j 

Signature: 

Services Division 

Date signed: 7 7=26l 

Date signed: 


Name:| 1 

Name: 


Title: Supervisory IT Specialist (Unit Chief) 

Title: 

FBIHQ Division: 

Signature: 

Signature: ! 

Human Resources 

Date signed: 

Date signed: 

Division 

Name: David G. Bennett 

Name:| j 


Title: Assistant Director 

Title: Division Privacy Officer for ITB 
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Unclassified 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS 


X PIA is required by the E-Govemment Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _X_ Yes. _No (indicate reason): 


PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): Justice/FBI-008, Bureau Personnel Management System (BPMS), 58 Fed. Reg. 51,875 (Oct. 5, 
1993), as amended 66 Fed. Reg. 8425 (Jan. 31, 2001) and 72 Fed. Reg. 3410 (Jan. 25, 2007). 

Notify FBI RMD/RIDS per MIOG 190.2.3? _X_No _Yes--See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCiv i l%20Liberties%20Library/form_for_m iog 190-2-3_ec. wpd 

SORN/SORN revision(s) required? _No _X_Yes (indicate revisions needed): Revised system of records 

needed in order to accurately reflect increase in collection of information and the manner in which the information is 
stored and used. 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? No _X_Yes (indicate forms affected): 

HRD should continue to work with OGC’s PCLU to review new and existing forms to ensure that the requirements of 5 
U.S.C.§ 552a(eX3) are met. 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 
Other: 


pnit Chief 

Privacy and Civil Liberties Unit 

Signature: 
Date Signed: 


v-foohx 

James J. Landon, Deputy General Counsel 

FBI Privacy and Civil Liberties Officer 

Signature: 
Date Signed: 
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Unclassified 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 

System Overview: 

The Bureau Personnel Management System (BPM S) is an FBI system that _ 

supports integrated human resource and payroll functions. I 


| The principal sponsor of BPMS is 
the Human Resources Division (HRD). Secondary sponsors include the Finance Division 
(FD), Director’s Office (DO), and Security Division (SD). 


b7E 


BPMS is made up of many applications that support the management of personnel 
resources, applicant, security matters and the payroll system of the FBI. The scope of the 
System Security Plan (SSP) covers the following BPMS components and the 
accreditation boundary consists of the following applications: 


b7E 
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Unclassified 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e., a human being or natural person, regardless of nationality)? 

_NO [If no, STOP. The PTA is now complete and after division approval(s) 

should be submitted to FBI OGC/PCLU for final FBI approval. Unless you are otherwise 
advised, no PIA is required.] 

_X_YES [If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

X The information directly identifies specific individuals. 

X The information is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 

_X _The information can be used to distinguish or trace an individual’s identity (i.e., it 

is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 
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_None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. [If you checked this item, STOP 
here after providing the requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

_X_NO __YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

NO. [If no, skip to question 7.] 

X YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_NO [If no, proceed to question 7.] 

_X_ YES 


a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 

_X_NO 


b7E 


YES [If yes, proceed to question 7.] 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

_X_YES Identify any forms, paper or electronic, used to request such 
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information from the information subject: Multiple forms exist 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

_NO ___X_ YES If yes, check alt that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


_X_ SSNs are necessary to identify FBI personnel in this internal 
administrative system. 

_X__ SSNs are important for other reasons. Describe: Payroll and insurance 
matters; background investigations and reinvestigations 

_X_ The system/project provides special protection to SSNs (e.g., SSNs are 
encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: SSNs are encrypted during transmission and are available only 
to certain users. 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

_X_No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
’ Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

_X_YES If yes, please indicate the following, if known: 
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Provide date of last C&A certification/re-certification: 

12/04/2008 

Confidentiality:_Low_Moderate _X_High_Undefined 

Integrity: _Low_Moderate X High_Undefined 

Availability: _Low_Moderate _X_High_Undefined 

Not applicable - this system is only paper-based. 
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10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

_X_NO 

_YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

_x_NO _YES 

12. Status of System/ Project: 

_ This is a new system/ project in development. [If you checked this block, 

STOP. The PTA is now complete and after division approvals) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PEA and/or other actions are required.] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? June 1989 

2. Has the system/project undergone any significant changes since April 17,2003? 
_NO [If no, proceed to next question (II.3).] 


X_YES If yes, indicate which of the following changes were involved (mark all 

changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system. 

_ A change from in formation in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environ m ent and/or 
avenue for exposure of data that previously did not exist.) 

_X_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 
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_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_X_ A change that results in a new use or disclosure of information in 
identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

X Other [Provide brief explanation!:I 


b7E 


3. Does a PIA for this system/project already exist? 

_X_NO _YES (A PIA was published in 2006 for the Bureau Personnel 

Management System Security Clearance Subsystem; however, the PIA does not 
adequately define the system under current DOJ and FBI standards.) 

If yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 
_NO YES 

[The PTA is now complete and after division approval(s) should be submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.) 
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[INSERT €LASSOR€ATK>N/€ON'mOL MARKINGS, INAPPROPRIATE 

flNAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: _ 


PI A 5s reouired by the E-Government Act 



A} \ , |> f f vi 1 n •O ! N ! <. t s n x ^ < < > v on 


X P;A is not required for the following r«ason(s): 

_System docs not collect maintain, or disseminate FIL 

System is grandfathered (in existence before 4/17/2003; no infer changes posmg s-ymticsm privacy risks). 
X in formation in the system relates to internal government operations. 

System less been previously assessed under an evaluation similar to a ISA. 

No signilteam privacy issues (or privacy issues are unchanged). 

_Other (describe): 


A ppHcable SORN(s); N/A ; th e ortiv PR in B1K.R are na mes of s y stem p oints or cont a ct. BIRR. is a repository 
i forma-Ion about s ystetrep not a means to? rcfrkvin R in formation hr name rv persona l identifier. 


Notify FBI AMD/RIDS per MIOG 190 .2 3? No Yes-See sample EC on PCLU intranet website item; 

htttv//hon;c/D(}/0(X:7i;rB/PCLii/IriavaeyCivii%20i.,iberfies%20Library/fornt _ldr._miogi90-2-3_cc.wpd 


SORN/SORN rsvision(s) required? _No Yes (indicate revisions needed): (N/A) 
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UN CLASS! FIED/FO CK> 


I. INFORMATION ABOUT TIO SYSTEM / PROJECT 

L Provide a general description of the syifea* or project that (a) mm* of 

foe sysmm/projcet, iiu&adiag associated acronyms* (h) structure «f the 
syslem/projeer, fodedtng iniercennectfoss with other projects or systems; (e) 
purpose of the system/projeet; (d) natare of the Information in- the ayalam/project 
and hose k will be used; (e) who will have access to the information m the 
system/project; ft) and the atasaer of transmission to all asm. 

The Bureau II Knowledge Repository (BIKR) i$ the- FBI's official on-hoe tool to 
r xwe Mae v'\i wr , o II s v v,. ^ ^ i < 

nrirribnnatnm. BIKR.. resides 0.0 tbe| | 

Ixthleh. m tom. wonks xvhhio the FBI 
|on the FBI FFt'.'llPT»e 

l Bern irom across the FBI wgxJarR coon.bum data to the t , 0 1 „ I ' : - 

.Yditson to BIKE to create for the entire 1 BINF V communhx t eommuaJ!} -updated, 
common c\v've.» \ym hexx the FBI -■ ,westing - Ff resources 

BIKR is the authoritative, coot raided source of information for all FBI IT projects, 
systems, networks and investments. For each of these, BIKR stores the information most 
critical to their effective management ~ such m capability descriptions, points of contact 
(POCs) and other stakeholder and compliance information, including Federal Information 
Security Management Act and privacy documentation. The FOC information in BIKR is 
the only personally identifiable information in the system. 

Meets n the yhyrirY foxtabaso. as wo .s the v 0 to eroo; Tea «' o BIKR. is 
sewnem-i to members of the Beta Fr.tw l earn xx-thia the Capital Plena me l ait :u the 
lofermad00 Technology Mamtgemom Division. 

BIKR data Is electronically available on an unrestricted basis to all authorised FA IN FT 
users at httot/fhomeAeanxeltestB IRE . Once- logged Into f BfNBT, no username or 
<x<ws I \ \\x\ e 1 'oI'cxx BIKR. at. fo I v one e the *■< e. t. nv. pew-- fo\ 
some additional, information on BIKR that will only be accessible by certain members of 
the Finance and Security divisions. 

Importantly, the information stored in BIKR does not belong to BIKR; rather, BIRR is 
a repository for 14 different data stewards" to manage foe information they require- to 
complete their individual missions. In addition to storing information, something the data 
wevunew one Id do themselves. the .0.0 cue serxtec BIKR proxtees ;> ir mulr.t.tmmg the 


>. j \ \ u K 1 \ ' . v x j ,, }) n .. ' \ X V, * Sv. u V V 

Management 'Division, Security DIvfona, Office of the Chief Knowledge- Officer, Mbmt&hssx Tsdtmungy 
Kxgieeoxg !« ar.d utonxim-sr ?>\M -W'S x O ^ \ t 

C O' CLASS t FI ED TO ti O 
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system's PTA name (the way OGC initially evaluates privacy aspects), and the system’s 
Investment name (the way the capability is reported out to OMB and Congress). With 
BIKE, users can view the information in the way that makes most sense to them* while 
remaining confident that their view of the data is reconciled with, the views shown to 
other stakeholders. 

BIKR not only stores information for open use, it also maintains relationships with 
outside data sets to enable deeper analysis and improve operations. For example* for 
commercial off-the-shelf systems or projects, users can determine whether the specific 
technologies a project or system employs (as stored in BIKR) are still supported by the 
original product manufacturer (as indicated by the Information and Technology Branch’s 
5 tandard Product List), or t scis ca use BIKR to determine w tether Me technologies 
they want to procure next are avatlahie via one of the I Bi's enterprise-wide contract 
vehicles. 

BIKR also contains links to the reference guides, handbooks* and templates most often 
used by Project, System, and Network Managers, 

2. Does too system/project collect, maintain, or disseminate any information about 
individuals (Le., a human being or natural person, regardless of nationality)? 

.NO Pf no, ST0F. The PTA is now complete and after division approval(s) 

should be submitted to FBI OGF/fCLB for final FBI approval Unless you are 
otherwise advised, no FI A Is required.) 

YES [If yes, please continue,] 

3, Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an Individual. 

(Check all that apply.) 

X 1 be information directly identities specific individuals 

_The information is intended to be used, in conjunction with other data elements, 

to indirectly Identity spec the individuals. 

_ The information can be used to distinguish or trace an individual’s ideality (Le,, it 
is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4, 

_None of the above. If none of the above, describe why the information does not 

identify specific individuals cither directly or indirectly. [If you checked ibis Item, 
STOP here after providing the requested description*! 


epic.org 


UNCLASSIFtElVFOUO 

EPIC-14-06-04-FBI-FOIA-20150519-6th-Production 


EPIC-15 








UNCLASSIFIEO/FOIK) 


4. Does the system/pmjeci pertain only to government employees, eostractors, or 
consultants? 

.NO .X..YBS 


5. Is information about "united States citizens or lawfully admitted permanent resident 
aliens retrieved trom the sysfem/project by name or other personal identifier? 

X_NO, |If no, skip to question 7«j 

While it Is possible that a user, knowing a POC, could retrieve information by the 
POCPs name, the purpose ofBIKR is to provide information about FBI systems, 
projects, networks and investments, 

YES. | if yes. proceed to the next question,] 

b, Does the system/prnject collect any information directly from the person who is the 
subject of the information? 

_ X _NO jlf no, proceed to question 7„f While POCs may complete B1KR 

information, they arc not the subject of the information. 

_YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
__X_.NO 

o t z* YES [If yes, proceed to question 7.) 


h. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act {e)p} statement (either on the collection form or via a 
separate notice)? 

.X N/A 

NO [The program will need to work with PCLU to develop/implement 
the necessary fom(s)§ 

.YES Identify any forms, paper or electronic, used to request such 

information from the information subject; 


S 
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^ 'v r ' v 4 ^\\s V s , IV V Uv. v. I I ^ 1 > vs 

.X.NO_YES If yes, check all that apply: 


.SSNs are necessary to esiablish/ctmurm the identity of subjects, victims. 

witnesses or sources in this law enforcement or intelligence activity. 


iu'N I' O r FD PO V >c ' t« >; W < s su '0 

o' V.C'U 

.SSNs are important for other reasons. Describe; 

.The sysiem/prqjcet provider special protection to SSNs (e.g.. SSNs are 

Sets ' , I t Ns t t f > * l\s. \ \ t \ g s U V. t Cs 

users). Describe: 

..I s ! \ •> h * N , ' | I nXU' 1 U i 

SSNs. Explain: 

8. Is the system operated by a contractor? 

.X No. 

.Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates FT 1 and additional requirements may be 
imposed as a .matter of Department of Justice policy. Consultations with the 
Office ofthe General Counsel may be required if a contractor is operating the 
system for the FBI. 

9, Has the system undergone Certiheatioo <k Accreditation (C&A) by the FBI 
Security Division (SeeDV/ 

NO If no, indicate reason; If CSi A is pending, provide anticipated 
completion date: 

.X.Y DS If yes, please indicate the following, if known; 

Provide date of last C<fe A cert i fie a ho n/r e-cerf ifi ca tie sq 
BIKJl operates on the| ~ I 

I 1 -F wvcd r, 

lute si C&A 3/14/2911. 

6 
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C«»M«stk!lh-.; m X w I.^w Moderate _ High Undefined 

Integrity; _X m Low Moderate High Undefined 

AvaikMiifyt _ X m Low Moderate High Undefined 

10, Does the system conduct dote mining os defined in Section S04 of the 

finokmenfingllecottuncndatiostsofthefi/n Commission Act of 2007. 1YL, I lo¬ 
se (codified at 42 USC 2fiooee-3Y? 

X m DO 

YES If yes, please describe the data mining famefion: 

I!, is this a national security system (as determined by the SecDY? 

.X NO .YES 

1 2. Status of System/ Project: 

This Is a stew system/ project in development. 

IL PAISTIYC SYSTEMS • PROJEC TS 

.X. NO [If no, proceed to next question (DA :,j 

YES If yes, indicate which of the following changes were involved (mark all 
changes that apply , and provide brief explanation for each marked change ?: 

A change horn information m a format that is anonymous or -tom 
identifiable to a format that is ideodfiabie to particular individuals, 

_ A now use of att I? system/ptmecq including application of a new 

technology, that changes how information in identifiable form Is managed, 
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I'NCL ASSI FI E 1>/FC> U O 


(For example. a change that would create a .more open environment and/or 
avenue for exposure of data that previously did not exist) 

A change that results m information in soorokkae form being 
merged, * ecu ,1 see, o? matched xxnh other daeUxuvs, 

A new .method of authenticating the use of and access to 
information in identifiable form by members of the public, 

\ syshmuteo \cfporatvi ofdaudwses -c information in 
tdemifothh.. o," v d or obtained sc- r: eometer del or public sources 

\ cow interagency use w Ace A tee w> moc'dots that results in 
next ones i <_\vJ hlb» a n bleu if kt * * 

A change P results r a „ s ns-, or , , , * u cm t c as 

tdentitbhk ham. 

A change that results its new items of information in Identifiable 
tone ream ceded rate the system pence* 

_ Changes do not involve a change in the type of records maintained , 

e dix aha us on who ' reeo do ere on c -ri a e v of 
disseminotion f miermahen ve W o -ecu ecue-c 

_ Otoe; | Provide brief explanation h 

3, Does a FiA tor this syntafsyprpket already exist? 

.a. NO .YES 

a. Provide dsde/tido of the PI. A: 

b Cats tile s> n.k t,c ,-e uedenewe ar - muorkwc; cLu,. >..s since she Ps x' 

NO YES 


I The FT A i$ now complete and after division approvals) should he sobodffed to 
PM OG€ FCi.1 for final FBI approval and determination if FIA and/or other 
actions ore mjnired.J 


a 
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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 


wxii orsvMKM project; Bureau Mailing I Ut (JETMI I 


MKR FBI Istmjtte Asset ID: 


Oeuv.; d From: 

RYSTEM/FRCMFCT FOC 

FBI OGCfCOI FOC 

. h-MsicP By. 

Naote:| ! 

Program Office: P1RASU 



Oecbt Cv On: 

1 Dtvlskur ITSB 


v.nnbet: 7330 


Pho«e.[ 


Room Number: P>0? 


FBI l>l\ 1SI0X t\ 1 ERWDI \f*. AFPROVM 8 Vo ep b'to as ttsecs> »r> consonant vtith DBDio n poi ses' 



Program Manager tor other appropriate 

P: urn Pro uo Piker 

Pr >grtsm Division 

Sigpsmrd 1 

Signature: Vk **** \X.. 

F seilltk ’3 & Logistics 

Date signed:// //C l 

Date signed: i< / Bpn / \ s 

Services Division 

Nttme:| | 

Name: Elton Wayne Thomas 


Otic iCh is? 

Title: SUPVY SECUR SFEC-CSO 

FBFHQ Division: 

i SnsmtUste: 

j Signature: 

s' 5. Os LogsstKs 

Dare signed: 

Date signed: 

Besots es Division 

Name: 

Rente: 


; Title: j 

: Title. 


After aU dhRiott approvals. Ibrwnt/sigoeB bard ceps plus electronic cop* to FBI OCEC/FCLU |JFII ?3S0}< 
sc x ' vertiee Officer's stetrronnbosts ct editions. anchor lutes! approt tc \ ^ l 

ft ' kneeur page } 
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jlNSERT CLASSIFIC:a11()N/CONTROL markings, 
IF APPROPRIATE! 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. cOi {Sumsu fading List) - Tho BEIL is a system that supports the efforts of the 
Logistics- Unit (LU) which, among other activities, is responsible for mail services 
BAIL provides customers with th© capabisty to enter, query, and report address 
information about FBI and non-FBI. individuals and groups who are eligible to receive 
publications and wanted bulletins distributed by the FBI. 

2. Data is net migrated into another system or used by any other systems, it is used to 
produce statistical reports and for address labels, which are utilized to mail Bureau 
publications, such as the Uniform Crime Report, the taw enforcement P in and 
reports from the Bomb Data Center and National Academy. Address information, of 
F3i individuals, nomFBi-individuate, and law enforcement agencies scheduled to 
receive Bureau publications Is entered Into BML via an online data entry panel. 
Through various online sanctions on the BML main menu panel, customers granted 
access to BML can also query and report address information. The LU has the ability 
to print mailing addresses using BEIL; it is the only unit that can use BEIL for this 
purpose, 

' The data in 8MI is text information consisting of name and address, it Is kept In a 
NamraFADASAS relational database file. Since LU ;s the sponsor, LU Is primarily 
responsible for the overall entry end maintenance of the data. However, groups 
supporting the Bomb Data Center, National Academy, and Law Enforcement Bulletin 
also enter data Into the BEIL. These users have a group code that allows them to 
enter address data pertaining to their group. 

2 Docs the system/project collect, maintain, or disseminate any information b ms 
individuals f * e . a human being or natural person, regardless of nationality)? 

_NO | If no, STOP, The FI'A is now complete and after division approvals) 

should be submitted io FBI OGCIPOJj for final FBI approval. Unless yon are 
otherwise advised, no FIA is required,) 

X YES jJfyes, please condone.) 

3. Please indicate if any of the following characten.slics apply to the information in the 
system about individuals: Bear in mind that, log-on information may identify or he 
linkable- to an individual. 

(Check ail that apply.) 

X The information directly idem.: ties specific individuals. 

_ The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals, 

X The information can be used to distinguish or trace an IndivMuaFs Identity 

(i.e., it is linked or linkable to specific- individuals). 

If you marked any of the above, proceed io Question 4, 


PNSERT < LAVSlHCYIION/f OATROE MARkINGV 
IF AFFROFRI ATE I 
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nm mr classifi cation/conteol markings* 

IF APPROPRIATE 


\ "o< ? the ahq* L rn\\\i. AhSYnhw ? >- v\s <5 

v l v !„u» i s , 1 cs x v, t! iss^' 

STOP here after providing the requested deseci|m<mJ 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

X NO YES 


5. Is information about United States cittern- or lawfully admitted permanent resident 
aliens retrieved fern the system/praiecl by name or other personal identifier? 

_NO. |IC no, skip to question 7>) 

. YES, jTf uw. proceed to the next quest mmj 

6. Does the system/project colled, any information directly from the person who is the 
subject of the m formation? 

X NO |if »o y proceed to question ?<j 

.YES 


e Dt s the v "it p 'u v >ri enru d C T, o? EC tme'M gs .or 4 ot 
assessments? 

.X.NO 

YES flf ves, proceed to question ?.| 


b. Arc subjects of information from whom the information is directly collected 
provided a written Privacy Act (c)(3) statement (either on the collection form or via a 
separate notice)? N/A 

.... /X NO jThc program will need to work with PCLU to deveiup/impleincrd 
the necessary form(s).| 

.YES identify any forms, paper or electronic:, used to request such 

information from the information subject: 

?. Axe Social Security Numbers (SSNs) collected, maintained or disseminated from the 
systonVprojeci? Full SSNs should only he used as identifiers in limital instances. 


jiNSkiU <1,\NMER UtON/VOAmOi MARKINGS* 
IFAfPROFRiATEl 
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i I 'X&i*IC\il0V(0\ IKOI 
IF APPROPRIATE! 

X NO_YES U yes, check all that apply: 


SSNs are accessary to eslabilsh/confirm the idenuty of subjects, victims, 
witnesses or sources m this law enforcement or .intelligence activity,. 


_ SSNs are necessary to identity FBI personnel, in this internal administrative 

system. 

SSNs are important for other reasons. Describe: 

The system/project provides special protection to SSNs (e.g., SSNs arc 
encrypted* hidden from all users via a look-up UbY, or only available to certain 
users). Describe: 

It is not feasible for the system/projeet to provide special protection to 
SSNs. Explain: 

8. Is the system operated by a contractor? 

.X.No. 


Yes. Information systems operated by contractors for the FBI may be 
considered Pri vacy Act systems of records. The Federal Acquisi tion Regulation 
contains standard contract clauses that mast be included in the event the system 
collects, maintains or disseminates PH and additional requirements may be 
imposed as a matter of Department o f Justice policy,. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI 

9. lias the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (Seel))? 

_NO If no. Indicate reason; if €&A h pending, provide anticipated 

completion date: 

X YES If yes, please indicate the following, if known: 

Provide date of last C&A eerbfk a don/r e~ee r title all on: 

CoaiMerrtbdity:_Low_Moderate ...XJligh Undefined 

Integrity: Low Moderate _X_IIigh_Undefined 

Availability; _Low_Moderate X High.i'odefsned 

(INSERT CiLAS'SiFlCATiON/CONTftOI, MARKINGS, 

IF APPROPRIATE! 
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LiNSERT C::LASSIflCA'HON/CON rROL MARKINGS, 
IF APPROPRIATE} 


Not applicable - this system is only paper-based. 


[INSERT CLASSIHCATiOVCON I ROE MARK'iVIS, 
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INSERT CLASSlflCATIDM/CONTROI... MARKINGS. 

if appropriate] 


10. Does the system conduct dots .mining as denned so Section S04 of the 

Implementing Recoonuendations of the 9/! I Commission Act of 2007, P.I.. 1 10- 
53 (cod tried at 42 USC 200bem3R 
X NO 

YES If yes, please describe the data mmm% fumUmi 
H, Is Ohs a national sec-:my system las determined by the SecP)? 

.X.NO .YES 

12. Status of System/ Protect: 

o " <■'o < \Sv ' D '! d' \ ft sk 

^fPF the PI \ ts tmw * mmkte <md utter dovmm mpmo dm* Arnold he 
submitted to FBI 0GC/P€1.X T for final FBI approval and determination If 
FI.4 and/or other actions are retpired>| 


II. EXISTING SYSTEMS / PROJECTS 

X NO [If no, proceed to nest question (lie),] 


N ' \ t v ^ ! ! .s> O' * si 11 .. n v , n 2 0 sn Vfh ‘ 4 

changes that apply, and provide brief esplaaathta for each merited change): 

A conversion {font paper-booed records to ao electronic system, 

A change from reformation m s format, that is anonymous or non- 
ideenhobic to a format toot is identifiable to ■particular individuals, 

A new use of on IT systom/pmiect, including application of a new 
technology, that changes how information In identifiable form .is managed. 
(For example, a change that would create a more open environment and/or 
avenue ter exposure of dam that previously did oof exist.) 

A change that results in information in identifiable form being 
merged, centralised, or matched with other databases. 


| INSERT CL A SSI FICATJON/CONTRI11, MARK! NGN, 
If APPROPRIATE] 
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\ vO X s\\N V 

IF APPROPRIATE] 



A change that resells in new items of inmnnation in identifiable 
Corrn being added into the sy;nem/pfq;ccf 


Changes do not .involve a change in the type of records mtdnlained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/prqjecL 

_ Other fProvwte brief explanation]:; 


?>. i\\ S \ ' - >1 It 1 ' * K i ' ^ s N 



11 he PTA s mm complete and after division '■ $hmM he submitted to 
FBI OCC/PCLC for final Flit approval and determination if PI A ami/or other 
art Ions are repaired.] 


INS F ICf Cl, ASSJ.Ff C ATIOA/CO ATM OL M ARK IACS, 
IF A PP ROPE I ATE | 
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tLL IHFOS1IATIOH CENTAIMED 


DATE 1 1 -1 BY HSICG/C32W33BS1 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

/PROJECT: C A l^em! Job Management Agenl 6 Workload Ccmiro 


i Wh .SYS-00002J5 


SYSTEM/PROJE CT PQC 
Name: IT Special ist f | 

Program Office: ITSD/ISS/OSSU 

Divisi on: USD _ 

Phone: | | 

Room Nomher: IE! I 17 | 4 


SrrERM FJDIATE APPROVALS 

Program Manager (or other appropriate 
executive as Division determines) 


‘hief, O SD, Operating System 


Signature; 
Date signed: 
Name: 

Title: r 


h forward signed hard copy pins elect rank copy t» FM OGC/PCLD (JEB.' 
. Terries Officer's determinations, conditions. a .a t final approval ffiif he tvcoi 
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(i v h&mhi i>i 

- u ' o w s'V\ ccmmiionp 


_ \ s £ red ' ho 0 » rrcu % 

S \ s \ ' < ' ' Os \ C ' \\ 0\a. V * .V's . *s' 


_x_PI \ ;s rs-M io>] v t ;V Mb ssse reasons ! 

M S'om >', os no' oo ! n >, 0 ? .^sso'n ; &g FIX 

\sso s^s J at' md i s\'Oul Sots -. s U tw 1 ' , m * 4- 

' 'N'''''0~ X 4 Os '0 0 ' ' s ss""0 :' 

ss 1 > > s X o \x > ! s S' Ss\ s n t s' ' 1 ' 

s\ \‘o ''o'' \s i ' Os ssO\ o 'OS'' -Ssso .re ..,o\ o ,3x4 >'C 

.Other (describe): 


Anpacahte nOENsso: _ N/A/ _ _ 

s<' »\ t :r KM ) kd'\ 00 MK\i M >0 d \o .O-’VS'T xe EC on PCLU kimmt. website here: 

' ' onxD'm ' i ii'\H th^assjfC s* os mo D< o '>s S' a » toy * \ 

MxW’O o s s's^r's No jo.u sSsc ceded 


C'»\ s s' S' V v.*;t'w \' !v ' s v x c'tx's o o „seJ ot " Ns W mos'V o "'s '\ ,\ 

N/A ' 


RECORDS. The program should comull xvnh RfvtD lo sdesnify/resosve any Federal record,vdeeiromc records issues 
Use system may contain Federal records whether ■ not it contains Privacy Act requests and, in any event a records 
schedule approved by the National Archives and Records Admmsstraban is necessary, RMD can provide advice on tins 
us 'sod ss o n rot ne honoc o sd,?opsusento it s for cksirmoc Rcc->rdleeps's; Certs hcsuen srd unv necessary qxssses 


| U;n ; Chief | Sigstatstre: 

Pnvae; - c 'd Csvsl Liberties QVet [Bate Signa l. ,o I ' yo 1 ; oo ,.u, - 

! ," 0 ' I x 'do I >epu ' ok 'o < o ss» tm ■. a 

1 W ' at ' .1 C» <s,' os u' \or * s osrsx ^ 


|I/NC'LASSIFXED| 


b6 

b7C 


epic.org 


EPIC-14-06-04-FBI-FOIA-20150519-6th-Production 


EPIC-1539 













































It MT ASNii'IH)! 


l iw 'orwxuon xhu i gd s^n m h-ugh i 

' V. * < V V W 0 >v ' N V V ! V V > ' 

•< >i ! V 0C U< > g Ss s l ^ CU '* \ NV ! V 

sweaxp^ejeet. hwlndlng iamraomieetloos xvlth other projects or swteow;»ot 

I v v t" • U *. > V ,. A x ', „ > '5 ^ > 

mu! how n will be used: up wim ^111 base access to the iofbrmotkm in she 
xyMeokprojeek (!) sod the nmnner of IrmtsodAx.loo to ail! siser*. 

The Computer Associate (CA) Universal lob Management Agent (UiMA.) and Workload 
Control Cordon (WCC) are niahdiwne-bostcd products designed to automate workloads 
and O' processes across the enterprise. UJMA end WAX' work together as a subsystem to 
provide a graphical management user in tod ace (GUI) to malolVanse schedulers to manage 
the resomces and background processes of the enterprise servers in order to balance 
workload on each partition in the server: This prelect Is an online, real-time, interactive 
system that aaiomabcally controls, schedules. and initiates work according to time-driven 
and event-driven activities. The UIMA provides monitoring resources in real time to 
identify it the appropriate amounts of memor y, disk or CPU resources are available 
before allowing a job to execute. This will prevent failures and potential cleanup 
activities later. The WCC ts a graphical interlace that helps to coordinate, execute, and 
manage job schedules and triggered events from the mamlrarne hosted workload 
automation tool. 

This project supports the Data Center Unit fDCU), Infrastructure Support Section, 

The system has been on- line since last year. T he system will be migrated fro m production 
physical servers into the | | b7E 

The UJMA/WCC system will reside between the FBI's Mauurame arid Windows Server 
2003/2008 environment, which is part of tiro "Scorer Enclave. Secret Hue lave Is the 

ed to track mainframe resources and schedule 


2, Does the system project collect, maintain, or disseminate any information about 
individuals (he., d human being or natural person, regard lor of national; ty>? 

.X.NO |.!f mg STOP, The PTA is now complete and after division apprevnlfs) 

Uwukl be wh mmed m HU t A A IN 1 1 Cur final HU approval. 1 n.Uw v-a are 
otherwise advised, no PIA is rxn.|ulred',j 

.YES (If yes, please continue.] 
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[UNCLASSIFIED! 


3. Pi&v ndic oe my <> t! ! m nn laraeterisues " y the nformatio $ the 
system ahem individuals: Bear in. mind that log-on information may identify or he 
linkable to an individual N/A 

(Check ail that apply.) 

The information, directly identifies specific individuals. 

.The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

.The information, can he. us;a to distinguish or trace an individual’s identity (i e.. it 

is linked or linkable to specific individuals). 

If you marked any of the afeove, proceed to Question 4. 

Norte of the above. If none- of the above, describe why the information does not 
identify specific individuals either directly or indirectly. {If you choked this Item, 
STOP here after providing the requested description,! 

4, Does the system/project pertain only to government employees, contractors, or 
consultants? 

__NO .YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the aystem/projeet by name or other personal identifier? 

.NO. | If no, skip to question 7,J 

.YES. [If yes, proceed to the next question,! 

6. Does the system project collect any information directly from the person who is the 
subject of the miotmm.mil 

_NO [If no, proceed to question 7,| 

_YES 


a. Does the system,project support criminal, €f, or FC1 investigations or 
assessments? 

_NO 


YES [If yes, proceed to question 7,j 


{I M1,*$MFIF.U{ 
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[UNCLASSIFIED! 


b. Are subjects of iformatio,i i cm w ion he infr sat m is d re;:tlv vi !e tod 
provided a written Privacy Act (e)(3) statement (either on the collection form or m s 
separate notice,;? 

__ NO (The program will need to work with Pt'LU to devetopmnplement 
rite necessary tomt(s),) 

YES .identify stay forms, paper or electronic, used to request such 
information from the information subject; 

?. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/projeet? Full SSNs should only be used as identifiers in limited instances. 

NO YES If yes, check all that apply: 

_SSNs are necessary to esiafoish/coniitm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


SSNs arc necessary to identify FBI personnel in this internal administrative 

system. 

SSNs are important for other reasons. Describe: 

_The sysiem/projeet provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

It is not feasible for the system/projeet to provide special protection to 
SSNs, Explain: 

8, Is the system operated by a contractor? 

..No* 


_Yes. Information systems operated by contractors fertile FBI may be 

conside ed Privacy \cf systen* u,vcctds 1 no I ederai Acquisition Regulation 
contains standard contract clauses that must. be .included in the event the System 
collects, maintains or disseminates PS and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel maybe required if a contractor is operating the 
system for the FBI. 


[UNCLASSIFIED; 
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! UNCLASSIFIED! 


\ wj it * r A V v.* . 0 O' 

tmty Division (SecDf? 

_NO If no, indicate r^isoiu if €&A k pending, provide amkspated 

completion date: 


YES If yes, please Indicate tfee following, if known.: 

Provide date of Inst C&A eerllltentinn/re-cerfiliendea: 

Confidentiality:_LowUloderste.Migii Undefined 

Integrity: .Cow.Moderate..Digit.Undefined 

Availability: _Low_Moderate_High _ Undefined 

Not. applicable •••• this system is only paper-based. 


{UNCLASSIFIED) 
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i .V/LASSEFI 


I 0. Does the system conduct date mining as dec ecu in Section S04 of the 

Intpiernenring Reeoronutndauons of the 9/1.1 Commission Act of 2909, P I., 110- 

NO 

YES if yes, pleas* describe the dufa mining fanetion; 

IE Is this a national security system (as determined by the Bed))? 

.NO .YES 


12, Status of System/ Project: 

This is a new system: project in development. 111 you checked this block, 
0 ft Eh 1 he P t A h coo complete nob after do wwn .yowmahw should Pc 
sobmitted to FBI OGC/fCLU for Bos! Fill approval and determination if 
PIA and/or other actions are reqolmij 


IL EXISTING SYSTEMS / PROJECTS 

1, When was the s>snem/proieet developed? 

2, Has the systcm/project undergone, any significant, chances since April 17, 2003? 

NO [If no, proceed to next question (.013 gj 


YES It yes, indicate which of the follovemg chances were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

A. conversion from paper-based records to art electronic system, 

A change from information in a format that is anonymous or non- 
idenhfiable to a format that is identifiable to particular individuals. 

A new use of an IT systonVoTojsoq including application of a new 
technology: that changes how nubnuaooo in foenritfobk torn- is managed. 
tj :; nr example. a change that would create a mere open eovi moment and Air 
avenue Ear exposure of data that previously did not exist.) 

A change that results in information to identifiable .form being 
merged, cenkahreri, nr matched wdh other databases. 


IlfoC.LASSfFIEDi 
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11, NCLASSl FI ED) 


A new method of authenticating the use of and access lo 
in.fon-n.atl.on in identifiable form by members of the public. 

A systematic incorporation of databases of information in 
warm fable form purchased or obtained front commerced or public sources. 

A new interagency use or shared agency function that results in 
new uses or exchanges of information in idcwdiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

A change that results in ness owns of information in identifiable 
form being added into the systern/project. 

O ! i '' ' C % i ! '> 

the individuals on whom records arc maintained, or the use or 
>C) » > ■* etc m » m ! n - n i 

_Other [Provide brief explanation); 

3. Docs a FLA for this system/project already exist? 

.NO .YES 

if yes: 

a. Provide date/title of the FI A: 

n IIa Jv ! "'N..r oupeu an. c me ,nn . guA ' . \ s >\"'ce:n Pi ' 1 
.NO .YES 


f he P X % is now complete and after division approvalfs) should be submitted in 
FBI OGC/FCLU for float FBI approval and determination If PIA and/or other 
actions are required..] 


IIINC LASS DEED I 
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{OGC/PCLU (Rev. 04/01/2011) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT; 

BIK.R FBI Unique Asset IB: J [ ■ -——-- 


Derived From; 
Classified By; 
Reason; 
Declassify On: 


SYST EM/PROJECT POC 

Name d I 

Program Office: ITB 
Divisi on: 1TSD 
Phone:| | 

g Room Number: 89 ;9 _ 


FBI OGC/PCLU POC 
Name: 

Phone |_ 

Room Number: 7350 


mvniinN rNfTir.RMEDlA'FE APPROVALS - 1 


Program Manager (or other appropriate 
executive as.Division determines) 

Division Privacy Officer, . 



Program Division: Di 


Signature: 


Datespas&_* ,/y,, **> / ?D 


Name: 1 | 

Name| 1 


Title: Acting Chief, 

T itle: MAPA 


1 1 _ 

...... 


FBIHQ Division: USD 

Signature: I I 

Signature: 


Date signed: ' ia./<?/»♦ 

Name:l ! 

Date signed: r* t- 

Name:| | 


Title: IT Specialist 

Title: Chief, Process Pohcv & Metrics Dmt 
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